Storefront privacy
Storefront privacy
Storefront is published by oddrefresh. This page describes what the app actually does with your data, as written in its code.
What leaves your phone
Your location, while the app is running. To build the list, the app sends your latitude and longitude, the search radius, and a row limit to a Cloudflare Worker run by oddrefresh. It asks again every 20 seconds at most, and only fetches a new list once you have moved about 30 metres or the list is three minutes old. The Worker rejects any point outside San Francisco.
Addresses you look up. Opening a storefront sends its address to the same Worker. Typing in the phone screen's lookup box sends what you have typed, once it starts with a house number and is at least four characters long, so the Worker can suggest matching addresses.
Where it goes from there
The Worker rounds your location to about 11 metres and uses it, with the radius, to query San Francisco's open data portal (data.sf.gov): the Registered Business Locations, Building Permits, Commercial Vacancy Tax, Assessor secured roll, and Enterprise Addressing System datasets. Those are public records. No account, API key, or identifier of yours is attached to any request.
The Worker keeps copies of the city's answers in Cloudflare's cache so the same question is not asked twice: six hours for businesses and permits, a day for tax and assessor records, and a week for the address list. Because a location query is part of the cached question, a rounded point can sit in that cache for up to six hours. The Worker's own responses are marked cacheable for between five minutes and an hour.
The Worker has Cloudflare's request logging turned on, so Cloudflare may record request details, including the address or rounded location in the request, for its standard log retention period.
What is stored on your phone
Through the Even App's local storage, the app keeps:
- your last location fix and the last list it fetched, so the screen is not blank when you come back
- your chosen search radius
- your saved storefronts, up to 50, each with the address, what the records said when you saved it, where you were standing at the time, and any note you typed (up to 280 characters)
These stay on your phone until you remove a saved storefront or remove the app. The saved list is never sent anywhere. The copy button puts it on your phone's clipboard only when you press it.
What it does not do
Storefront has no account, no analytics, no advertising, and no tracking code. Its only dependency is the Even Realities SDK. It talks to one server, the Worker described above, and nothing is sold or shared beyond the two services named here.
The Even App that runs Storefront is made by Even Realities and has its own privacy policy.
Questions
Questions go to the Contact me button on this page.